A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel | Nov 28, 2023 | Sep 13, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Sep 13, 2023 |
| Debian | — | Upgrade linux | Oct 19, 2023 | Sep 13, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 4, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 8, 2023 | Sep 13, 2023 |
| Suse | — | Upgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rt | Oct 11, 2023 | Sep 13, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.1.0-1021-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency | Sep 18, 2023 | Sep 13, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub